CVE-2026-56315

Critical

Description

picklescan before 1.0.4 fails to block at least seven Python standard library modules (including uuid, _osx_support, _aix_support, _pyrepl.pager, and imaplib) exposing eight functions that provide direct arbitrary command execution. Attackers can craft malicious pickle files importing these unblocked modules to achieve remote code execution while bypassing picklescan's safety validation entirely.

SeverityCritical

CVSS9.8

Exploit probability—

ProductPicklescan

PublishedJun 23, 2026

First seenJun 23, 2026

Weakness typeCWE-184CWE-184

How to fix

Update

picklescan1.0.4 or later

Vendor advisories

github.com/mmaitre314/picklescan/security/advisories/GHSA-g38g-8gr9-h9xp

Affected products

Product	Affected versions	Fixed in
picklescanPyPI	v < 1.0.4	1.0.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.